(usagi-users 02702) Re: problem with retransmit packet

[Mitsuru KANDA / 神田 充 <mk@xxxxxxxxxxxxxx>]

Hi,

Have this occurred another cipher algorithm (e.g., AES)?

We'd like to know more additional information (.config, pfkey
settings...)

And also Could you try to test another version of USAGI kit?
(e.g., "snap-shot-20030721"
or cvs tag name "bHISTORIC-IPSEC-MIP6-20030804" is the latest/fixed 
USAGI 2.4 IPsec version.)

Regards,
-mk


At Sun, 14 Dec 2003 13:57:36 +0900,
Kazutaka Tachibana <Kazutaka.Tachibana@xxxxxxxxxxx> wrote:
> 
> Hi.
> 
> I'm facing problem with TCP retransmit packet has
> incorrcet cheksum when using IPsec( not Authenticate,
> only Cipher ).
> 
> I expect Usagi Kernel encrypted plain text and made cipher
> text, then already plain text had disappeared.
> so, when sent retransmit TCP packet, encrypted cipher
> text. after all, encrypted two times.
> 
> In fact、dumping packet appleyed IPsec( Using block cipher,
> for example 3DES-CBC), and compared first packet with
> retransmit packet, I found top of about 20byte(maybe TCP header,
> always kernel made)were the same with first packet,
> but except 20byte(maybe data)were not the same.
> 
> This is Usagi's bug? or my mistake?
> 
> I'm runnig usagi stable 4.1 on RedHat9.0. 
>